mirror of
https://gitlab.kube.huskypup.net/Scooby/Homelabv4.git
synced 2026-08-21 05:26:49 +00:00
Scooby HuskyandClaude Opus 4.6
8bde33f4d1
- Delete nessus Application CRD, manifests, and bootstrap script - Vendor envoy-gateway Helm chart (v1.6.3) locally to work around ArgoCD v3.3.3 Docker Hub OCI resolution bug - Re-enable auto-sync for envoy-gateway Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
57 lines
1.6 KiB
YAML
57 lines
1.6 KiB
YAML
{{ if .Values.config.envoyGateway.provider.kubernetes }}
|
|
{{ $kube := .Values.config.envoyGateway.provider.kubernetes }}
|
|
{{ if and (not $kube.watch) ($kube.deploy) (eq $kube.deploy.type "GatewayNamespace") }}
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
name: {{ include "eg.fullname" $ }}-cluster-infra-manager
|
|
labels:
|
|
{{- include "eg.labels" $ | nindent 4 }}
|
|
rules:
|
|
{{ include "eg.rbac.infra.basic" . }}
|
|
{{ include "eg.rbac.infra.tokenreview" . }}
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRoleBinding
|
|
metadata:
|
|
name: {{ include "eg.fullname" $ }}-cluster-infra-manager
|
|
labels:
|
|
{{- include "eg.labels" $ | nindent 4 }}
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: ClusterRole
|
|
name: '{{ include "eg.fullname" $ }}-cluster-infra-manager'
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: 'envoy-gateway'
|
|
namespace: '{{ $.Release.Namespace }}'
|
|
---
|
|
{{ end }}
|
|
{{ end }}
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: Role
|
|
metadata:
|
|
name: {{ include "eg.fullname" . }}-infra-manager
|
|
namespace: '{{ .Release.Namespace }}'
|
|
labels:
|
|
{{- include "eg.labels" . | nindent 4 }}
|
|
rules:
|
|
{{ include "eg.rbac.infra.basic" . }}
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: RoleBinding
|
|
metadata:
|
|
name: {{ include "eg.fullname" . }}-infra-manager
|
|
namespace: '{{ .Release.Namespace }}'
|
|
labels:
|
|
{{- include "eg.labels" . | nindent 4 }}
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: Role
|
|
name: '{{ include "eg.fullname" . }}-infra-manager'
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: 'envoy-gateway'
|
|
namespace: '{{ .Release.Namespace }}'
|